h0p3sf4ll

Cicd Audit — Security skill for Claude Code

Security community

Security audit of all CI/CD pipeline configuration: GitHub Actions, Jenkins, GitLab CI, CircleCI.

How to install Cicd Audit

Installs to ~/.claude/commands/h0p3sf4ll-threatlint-cicd-audit.md

Terminal

mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/h0p3sf4ll/threatlint/HEAD/.claude/commands/cicd-audit.md -o ~/.claude/commands/h0p3sf4ll-threatlint-cicd-audit.md

Restart Claude Code, or start a new session, for it to be picked up.

What Cicd Audit does

description: "Security audit of all CI/CD pipeline configuration: GitHub Actions, Jenkins, GitLab CI, CircleCI. Finds script injection, unpinned actions, excessive permissions, and fork PR exposure. Saves a Word document report." argument-hint: "Optional: specific workflow file or CI tool to focus on (default: all pipeline config)"

Delegate to the `appsec-cicd-auditor` agent. Pass any file path or tool name argument as the audit scope.

The agent will:

Locate all pipeline configurati

Alternatives in Security

SEO Audit Skill — English · 中文可复用的单页面 SEO 审计 Agent Skill 235 ★
Senior Engineering Partner — A stack-agnostic Claude Code skill: strict code reviewer, pair programmer, debugger, and mentor (Python/Bash/A 148 ★
Release Audit — Use right before cutting a release — it spawns ONE fresh sibling session via CCC that audits only the JUDGMENT 130 ★